Commit graph

679 commits

Author SHA1 Message Date
Adam Wight
f3c1500f27 Exclude node_modules from php lint script
Some node modules include PHP scripts, and these files shouldn't be
analyzed.

This could be improved further by excluding `extensions/*/{node_modules,vendor}`,
but I wasn't able to find a way to represent this for php-parallel-lint
without listing each directory individually.

For comparison, .phpcs.xml has this line to exclude dependencies:

    <exclude-pattern type="relative">^(\.git|coverage|node_modules|vendor)/*</exclude-pattern>

Change-Id: I285eb32f67b71eaf111c9c9cd12f8205ba97eaf3
2022-01-24 23:38:59 +01:00
Tim Starling
9e909868b5 Update johnkary/phpunit-speedtrap to 4.0
Because I want Daimona's PR #71. I reviewed the diff.

Change-Id: I4ecd2a191a7fd023aa82d80a3736b56de39b41f3
2022-01-24 15:26:18 +11:00
James D. Forrester
d758340d89 Update OOUI to v0.43.0
Release notes:
 https://gerrit.wikimedia.org/g/oojs/ui/+/v0.43.0/History.md

Bug: T248631
Bug: T254646
Bug: T282751
Bug: T292631
Bug: T295682
Bug: T295885
Bug: T296335
Bug: T296766
Bug: T297386
Bug: T297481
Bug: T297900
Bug: T297963
Bug: T297979
Bug: T298211
Bug: T298737
Depends-On: I7a19fba8bce65640bdb69b3a63812537e1d29af3
Depends-On: I1bb6aa75b28f263543ea069496cf34bdaa5d02e0
Depends-On: I3d00bb19467d59d1a79ed57b2abb91ea0a951094
Depends-On: Icb30c4c454da2b362a2555b8bae6efa4cc5de9db
Change-Id: I5b1af082503fe22ec6049784fc43b324534c5b95
2022-01-14 01:52:02 +00:00
Reedy
579183022b composer.json: Temporarily allow composer/package-versions-deprecated plugin
Should be removeable after release and integration of newer doctine/dbal release

Bug: T298283
Change-Id: Ia91325bb9ac89cd1ff6831251ae291764892b143
2022-01-04 23:03:26 +00:00
Reedy
ab276b9249 Update doctrine/dbal versions
doctrine/dbal 3.1.3 suffered from CVE-2021-43608

Change-Id: Ia58cfac87271d75530cac29cc4966833fbe00480
2022-01-04 22:41:44 +00:00
jenkins-bot
ed4b61f487 Merge "composer.json: Add wikimedia/composer-merge-plugin to allow-plugins" 2022-01-04 22:16:09 +00:00
Timo Tijhof
7d8559d9bf Update wikimedia/cdb to 2.0.0
Also, re-alpha-sort the lists of external libraries in the release
notes file.

Bug: T287972
Depends-On: Ib55a7fc8968ec7e951d4e4d160db0601aaff74ea
Change-Id: If9fd7efd0f232a567204fee0b7b093f6edacd456
2022-01-04 16:30:19 -05:00
jenkins-bot
a23cbc1c8d Merge "Update composer/semver" 2022-01-04 16:47:50 +00:00
Reedy
12d43ef545 Upgrading symfony/yaml (v5.3.6 => v5.4.0)
Also note in RELEASE-NOTES about promotion from require-dev to require

Depends-On: Ibfdbd2a479bd13d95e00fb41c2dd26b6ea6ea561
Change-Id: Ie1368ea2e5799b6b1e3f991b8156b967e12e0210
2022-01-04 16:24:00 +00:00
Reedy
7d8418056d Update composer/semver
- Upgrading composer/semver (3.2.5 => 3.2.6)

Change-Id: Id34f51254ae703ced2ce335c4af56b6fbf51c338
Depends-On: I2f4a3cf88e5e70b7695b4e7a6857be84d142a8e3
2021-12-28 18:11:45 +00:00
Reedy
04d2a56193 composer.json: Add wikimedia/composer-merge-plugin to allow-plugins
Bug: T298283
Change-Id: If1ca75740394b807467ba8b139d996adc38378c0
2021-12-23 23:11:52 +00:00
jenkins-bot
d42ea5fb3d Merge "Add composer releasenotes command" 2021-12-23 17:43:34 +00:00
James D. Forrester
26598c1574 Update wikimedia/assert from 0.5.0 to 0.5.1
All libraries and extensions require ^0.5.0 so this should Just Work™.

Bug: T287972
Depends-On: I38ff3873df866cd896c9028dc6277ac7aac8a932
Change-Id: I0689e447d7b603a347869aa442a58602f45b2647
2021-12-21 12:12:07 +00:00
Reedy
0bc26db25a Add composer releasenotes command
Bug: T297826
Change-Id: Ia2ab03f27d423c4c318da803172957d5ff5c0311
2021-12-15 21:21:45 +00:00
Dan Duvall
9778adf1c5 Refactor SettingsBuilder to use BagOStuff.
Removed use of Psr\SimpleCache\CacheInterface in favor of BagOStuff, as
the latter is a tried-and-true abstraction and the former offers no real
upfront benefits since the caching patterns of SettingsBuilder are quite
basic at this time.

The simplicity of cache interface use is largely in part to the minimal
probabilistic stampede protection implementation within CachedSource
which is left untouched by this change.

Bug: T294748
Change-Id: Ie59b37a8d5c7bf96225757fa9eb9d2c762476713
2021-12-10 10:20:05 -08:00
Petr Pchelko
f98f7312e1 SettingsBuilder: add ability to validate config against schema
Not yet sure if config validation makes sense in production,
possibly before we write into cache we can validate, and then
trust that the cached values are all valid. This patch just
adds ability to validate the configuration.

"justinrainbow/json-schema" is already a transitive dependency
and is already in vendor.

Change-Id: Ib039c897a36a7e1911309fd29514657042b1b139
2021-11-30 00:09:07 +00:00
Dan Duvall
d83a7bcd09 Cache loading of SettingsBuilder sources
The `SettingsBuilder` now accepts a PSR-16 cache interface with which to
store and query settings before attempting to load from each source. By
default, no cache is used, but any object that implements the
`Psr\SimpleCache\CacheInterface` may be provided to the constructor.

An explicit dependency on "psr/simple-cache" has been added to
`composer.json`. Note that this dependency already existed in vendor
albeit it as a transitive one.

An APCu based `SharedMemoryCache` adapter is provided as a canonical
PSR-16 compliant interface for production use.

Sources are now queued by the `SettingsBuilder` when calling `load()`.
If a cache interface has been provided, and the source is considered
cacheable (implements `CacheableSource`), then it is wrapped as a
`CachedSource` which will query the cache first before loading from the
wrapped source.

Cache stampedes are mitigated using probabilistic early expiry. The
implementation for this was partially based on symfony/cache-contract
source code but also from the Wikipedia article and paper referenced
therein.

See https://en.wikipedia.org/wiki/Cache_stampede#Probabilistic_early_expiration

Bug: T294748
Change-Id: I52ab3899731546876ee58265bd4a1927886746dc
2021-11-29 12:54:59 -08:00
Petr Pchelko
120ef51cbf SettingsBuilder: Add YAML file format.
If php-yaml extension in installed, use that. Otherwise
we fallback to symfony Yaml parser.

php-yaml is about 20 times faster then symfony, for default-settings.yaml
it will take PHP-yaml 6ms to load it vs 100ms for symfony. But given
that the result will be cached, it's better not to bring in
a required native dependency.

Bug: T294751
Change-Id: I3ffde926c3f264cacf39810ff7bd338c9f78823d
2021-11-29 09:27:20 -08:00
Reedy
8999e0c402 composer.json: Swap composer foo for @foo
Change-Id: Ib65ad97e49ba1b847c19ce1805f32b42382882cd
2021-11-24 16:40:11 +00:00
Timo Tijhof
6655eef322 resourceloader: Update wikimedia/minify to 2.2.6
Bug: T296058
Depends-On: I526016f88ed581832fd974f55e764fd2d950992a
Change-Id: I6bceffda0c7ff4f4d92e15e85ae8719426ff4c3f
2021-11-19 20:00:08 +00:00
Tim Starling
dc8a5e1021 Upgrade to RemexHtml 3.0.1
Depends-On: I651e52c4e1346ec829a56da37e67e9649d855c08
Change-Id: Ic62ac01b4429fb269afc08aead431e78fa9eb16f
2021-11-19 00:54:28 +00:00
Reedy
64353177e1 Upgrading guzzlehttp/psr7 (1.8.3 => 2.1.0)
Change-Id: I3af605d909cffd625b278577887394cbe61a9c6e
Depends-On: I8e9c899462b23e94bc8ff7875670062f97b3f1c6
2021-11-15 16:57:25 +00:00
Reedy
b2a2e0bf45 Upgrading guzzlehttp/guzzle (7.2.0 => 7.4.0)
Change-Id: I192f0a3a58b00b6fcac35711ca3fb4b1b23378e3
Depends-On: Icbfe05e17b2e5d31da9de3f61b14b6732c56a32f
2021-11-11 22:47:28 +00:00
Timo Tijhof
f913f4d29c Update wikimedia/minify to 2.2.5
Changes since 2.2.4:

* Fix minify CLI to work from within vendor directory.
* Remove true/false !0/!1 micro optimisation. (T237042)

Depends-On: Id2f2061ac5c7389840b73ad138a91df73a40877f
Change-Id: I1f437781dd8f0cea516693a6e15fe3f95a0aa2ad
2021-11-11 22:19:51 +00:00
Reedy
53ceaca6f9 Update doctrine/dbal versions
Change-Id: I9af2b53825afc7497af4a474c2940fd7dd841e72
2021-11-08 20:30:12 +00:00
Petr Pchelko
db5cb74486 Upgrade to Shellbox 3.0.0
Depends-On: Idfe35c788a84f04a760edb01c0bf48ddc8accb1f
Change-Id: Ib5ffeec5bb6b45ea7fb93aec8df4368231188b67
2021-11-05 08:31:26 -07:00
Volker E
2d25498471 Update OOUI to v0.42.1
Release notes:
 https://gerrit.wikimedia.org/g/oojs/ui/+/v0.42.1/History.md

Bug: T283812
Bug: T287329
Bug: T288928
Bug: T289043
Bug: T289043
Bug: T290792
Bug: T290975
Bug: T291142
Bug: T291284
Bug: T293274
Bug: T293635
Depends-On: I0918c0c866147e6a103ce8815b7a36d0463457b7
Change-Id: I717ff53e18e95c72ace1c46b6236cfecb5cd8217
2021-11-04 19:39:43 +00:00
Tim Starling
6273b5f932 Upgrade RemexHtml to 3.0.0
This is required by Parsoid 0.15.0-a6.

I don't need to increment the Parsoid version here since it is
not using semantic versioning. The caret will allow upgrades until the
Glorious Future of 1.0.0.

Depends-On: I72346a431f556555410f6af64bdb10140ea9bd8a
Change-Id: Idefebb725444d244252623533b8469214324f931
2021-10-27 16:29:18 +00:00
Alexander Vorwerk
bd13a42535 build: Update mediawiki-codesniffer from v37.0.0 to v38.0.0
Change-Id: Iff096d3789b8c261aa47fb41d6f450a3bda7ce6a
2021-10-22 22:43:16 +02:00
Reedy
7accea74ec Upgrading wikimedia/wrappedstring (v3.2.0 => v4.0.1)
Depends-On: Ic26f3a3be1061b77e0af7b8c4c2569f9d070d191
Change-Id: I5a9f97cac52e4e9af612c2130359b017fb7176c1
2021-10-12 23:30:27 +00:00
Reedy
2bcc75c9b4 Upgrading zordius/lightncandy (v1.2.5 => v1.2.6)
Depends-On: Ie300e47f0c1429784a9ee97d99b25e37ea83787a
Change-Id: Ic2829a2d1c6d4ba106b162416cedecd7066f2c34
2021-10-09 10:25:10 +00:00
Reedy
7735af1e27 Upgrading psr/log (1.1.3 => 1.1.4)
Change-Id: If11d0081355eb9caa157fb92389d92ac65b27d4e
Depends-On: I5c4006f5747075a92a78900606e196d33c6d9a8f
2021-10-08 21:51:56 +01:00
Reedy
000ae1d062 composer.json: Relax some constraints for some dev requirements
Change-Id: Ife7ddb98e3c1064a4e4e70f119549b2a1394e2d7
2021-10-08 21:51:21 +01:00
Reedy
659fd89408 Update pear/*
- Upgrading pear/mail_mime (1.10.9 => 1.10.11)
  - Upgrading pear/net_smtp (1.9.2 => 1.10.0)

Depends-On: Ib698ef15b6f97ea637aedcc6ef26860c8c4a2cd0
Change-Id: I287e148a9078866a55e5f04693406374d8cca976
2021-10-08 21:50:17 +01:00
libraryupgrader
2a64e209da build: Updating dependencies
composer:
* php-parallel-lint/php-parallel-lint: 1.3.0 → 1.3.1

npm:
* @wdio/mocha-framework: 7.4.6 → 7.13.2
  * https://npmjs.com/advisories/5197 (CVE-2021-3807)
* nth-check: 2.0.0 → 2.0.1
  * https://npmjs.com/advisories/5101 (CVE-2021-3803)
* ansi-regex: 5.0.0 → 5.0.1
  * https://npmjs.com/advisories/5197 (CVE-2021-3807)

Change-Id: I0b17591a4d230192d5c64b68252bb3024ddcedae
2021-10-04 06:38:39 +00:00
jenkins-bot
d88c00f283 Merge "Bump wikimedia/parsoid to v0.15.0-a1" 2021-09-27 22:15:32 +00:00
C. Scott Ananian
7e37641898 Bump wikimedia/parsoid to v0.15.0-a1
Depends-On: I98e9bde6adfe6954a98748cc646367992f25a190
Change-Id: I210c66c350de1d310480f65385ce67ded7129792
2021-09-27 21:41:20 +00:00
Kunal Mehta
041dadd69d Update wikimedia/shellbox to 2.1.0
Depends-On: Ie53f3d000d9d8ae1617b7bdeb454586e8302e240
Change-Id: I7d7285d6ee8b107bf77a68354bb3861d10174258
2021-09-24 17:08:17 -07:00
Reedy
452329b6c2 Update composer/semver from 3.5.4 to 3.5.5
Change-Id: I7bbc99303b07fe363094ddbe7624aabbc60dafb3
Depends-On: Iec357af3b6c9e1af9802f7fab7f189d06a55737a
2021-09-23 08:30:42 +01:00
Reedy
50bb8bfdfb Update composer/spdx-licenses from 1.5.4 to 1.5.5
Change-Id: Ia286cae043469ee2b213c5869d096d4cecab7f4f
2021-09-23 08:28:01 +01:00
Reedy
75706c4f22 Update doctrine/dbal for PHP >= 7.3 from 3.0.0 to 3.1.2
Change-Id: I5a4adf69dd5726bdb0586a1545712ef6dd8daea3
2021-09-22 23:13:18 +00:00
Reedy
ad49bffd76 Update doctrine/dbal for PHP < 7.3 from 2.10.4 to 2.13.3
Change-Id: Ic6c4f49c66d3f3990a15615cc5b085e5134df8d3
2021-09-22 23:13:05 +00:00
Alexander Vorwerk
b65df96646 build: Update wikimedia/purtle from 1.0.7 to 1.0.8
Depends-On: I608c1215b5209c25493c997beb21b58ecf20c7ca
Change-Id: Iaeeda4e17cb3b04feb813c3f7590f4cba1a5a7f6
2021-09-21 14:57:53 +00:00
C. Scott Ananian
78522aea4b Add symfony/polyfill-php80
Doing this before REL1_37 ensures that any PHP8.0-isms won't break
backports.

Bug: T290697
Change-Id: I945a08d219c3d30813ca2f778d097ebd8bb0f129
2021-09-13 22:15:27 -04:00
James D. Forrester
017366e2cf Update cssjanus/cssjanus from 2.0.0 to 2.1.0
Depends-On: Iac0b7702b001062495f1e08d055481d3c436161e
Change-Id: I259c341ad04fcb13921d0cf2433e0552a8870bad
2021-09-09 12:44:48 -07:00
Umherirrender
07b499fbcf build: Update mediawiki/mediawiki-phan-config to 0.11.0
Addition and remove of suppression needs to be done with the version
update.

Change-Id: I3288b3cefa744b507eadebb67b8ab08c86517c1c
2021-09-07 17:19:05 +02:00
James D. Forrester
31933c28ee Update wikimedia/wait-condition-loop from 2.0.1 to 2.0.2
Bug: T289176
Bug: T287972
Depends-On: I009fde18d039ede388a758021651961f0c0f13b0
Change-Id: I9bf513183672e83ded09647de79e36c407b1fa01
2021-08-24 16:21:10 +00:00
Kunal Mehta
c92485ebe2 Update wikimedia/shellbox to 2.0.0
Depends-On: I104309fcc7823a881c0cd005fad3aea7ab89f318
Change-Id: I10e2860f306483e43dd9d65783c8ff96f2eee169
2021-08-23 11:18:42 -07:00
Volker E
c3dc0a2d99 Update OOUI to v0.42.0
Release notes:
 https://gerrit.wikimedia.org/g/oojs/ui/+/v0.42.0/History.md

Bug: T201491
Bug: T269657
Bug: T277821
Bug: T277821
Bug: T277845
Bug: T277985
Bug: T278594
Bug: T279479
Bug: T280913
Bug: T282047
Bug: T283247
Bug: T283905
Bug: T285310
Bug: T285727
Depends-On: I78638ae140e999afa027ef86dd82beabc13ee0fc
Change-Id: Id0be3526bcafb549f2bac5c0026fb24e46745320
2021-08-18 23:56:04 -07:00
Fomafix
6157bdaef0 CSSJanus: Update from version 1.3.0 to version 2.0.0
This version fixes a flipping bug.

Bug: T288943
Depends-On: Ida34372a4e5acb3147d83c7a1d008850c8382e32
Change-Id: I0528443e4eae0338f5a37491352db03944c6bd4c
2021-08-16 18:39:41 +00:00